NyaMisty

Windows 10 / Windows 11 Hyper-V Port Excluded issue

When you enable HyperV and WSL on the same machine, there'll usually tons of ports being used, see netsh int ipv4 show excl proto=tcp

HNS WinNat

These excluded ports are managed by winnat (see https://stackoverflow.com/questions/65272764/ports-are-not-available-listen-tcp-0-0-0-0-50070-bind-an-attempt-was-made-to).

HNS is a supporting service for HyperV, managing all HyperV vEthernet adapters and Nat related things.

Resync Local Types in IDA

Sometimes there's some inconsistency between local types and structs view.

Typically, you can see the type in the "Structures" view are zero-lengthed, which should normally be the same size as local type's one.

When this happens, you'll not be able to rename the structure fields in HexRay Decompiler's view, and both hotkey N and right-clicking the item won't show the rename popup.

After reverse engineering the hexx64.dll, I found that IDA tries to do the following things:

IDAPython CTREE

Important links

Description

The CTREE is built from the optimized microcode (maturity at CMAT_FINAL), it represents an AST-like tree with C statements and expressions. It can be printed as C code.

Open a GCP instance and mount google drive: ~/fclone mount yuya_bak:/ /home/misty/remote_p -v --drive-chunk-size=16M
Download ffmpeg wrapper and yt-dlp nightly version (after 2021.06.01)
Download using yt-dlp: (Preparation: make the ytdl_mp4merged_log directory for log, change thread num 16 to a proper value, change /home/misty/remote_p to your mount point correspoindingly, change /home/misty/testmp4/ffmpeg to the ffmpeg wrapper)

yt-dlp -j --flat-playlist 'https://www.youtube.com/channel/UCjGE11ZnF0JSR8egVAwh-3A/videos' | jq -r '.url' \
  | parallel -j 16 -t -v --progress \
  | "yt-dlp --write-comments --downloader ffmpeg --merge-output-format mp4 --ffmpeg-location /home/misty/testmp4/ffmpeg -f 'bv[ext=mp4]+ba[ext=m4a]/b' -P 'home:/home/misty/remote_p' -i -o '%(uploader)s-mp4merged/%(title)s-%(id)s/%(id)s.%(ext)s' 'https://www.youtube.com/watch?v={0}' > ytdl_mp4merged_log/{0}.log 2>&1" \
  2> >(while read line; do echo -e "\e[01;31m$line\e[0m" >&2; done)

Huawei E5885 current firmware backup manual.

Download modified usbloader, which will copy proper busybox into /system/busybox and enable telnetd on your device (will add additional line into /system/autorun.sh). Use it only on E5885, not on other device!
Load it using balong-usbdload. Refer to this disassembling manual.
After loading, wait about one minute, disconnect device from the computer and power off the device holding power button for ~15 seconds.
Insert MicroSD card to the device and power it on.
telnet 192.168.8.1 2323

/system/busybox sh

	# -- coding: utf-8 --
	import json
	import idaapi
	import idc

	processFields = [
	"ScriptMethod",
	"ScriptString",
	"ScriptMetadata",
	"ScriptMetadataMethod",

	<!DOCTYPE html>
	<!-- <html><head></head><body></body></html> -->
	<html class="layout-frame bd-core layout-allscreen">
	<head>

	<meta charset="UTF-8">
	<meta itemprop="name" content="115，一生相伴" />
	<meta itemprop="image" content="web_icon.jpg" />
	<meta name="baidu_union_verify" content="52cba82272ca074f2ef94d55d9083884">
	<title>115，一生相伴</title>

	/! Generated by Font Squirrel (https://www.fontsquirrel.com) on April 11, 2021 /



	@font-face {
	font-family: 'huakang_shaonv_for_powerlinRg';
	src: url(data:application/font-woff2;charset=utf-8;base64,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

	#coding: utf8
	import sys
	reload(sys)
	sys.setdefaultencoding("UTF8")

	import requests, re, json
	sess = requests.Session()
	r = sess.get("https://nijisanji.ichikara.co.jp/member/")
	urls = re.findall(r"href=(https://nijisanji\.ichikara\.co\.jp/member/.*?)>", r.text)